Lewis Strawbridge
@Web3Lewiss
Followers
72
Following
214
Media
20
Statuses
115
Cyber Security CISSP | Securing Web3 | Marketing @SherlockDefi 🕸 Helping Roundhouse kick smart contract bugs in the face.
Everywhere
Joined October 2022
Working in Web3 and Fighting Muay Thai are my favourite things in the world. Heading back to Thailand shortly (exact destination TBA), if your around let's go kick things together. 😁
0
0
2
I'm now staying at a hostel, and I met some Web3 developer here who tells me: "The best place to start with mastering solidity is within the docs, YT videos are trash. In 1 month you can reach a decent level." I'm not coming in completely blind, so let's see 👀 more to come...
2
0
4
GM, I've given myself a few extra days to recharge and recalibrate... Moving to a new area of Bangkok today and locking in to up-skill mind and body.🔒🧑🔬
0
0
0
From Monday, I'm going to be mainly focussed on developing skills for audit contests and bug bounties. After speaking with many researchers in the field, it offers flexibility and reward like no other, as long as you strategize well. I'll be posting updates of the journey
2
0
3
Web2 Security🤝Web3 Security
We've analyzed years of our audit data to build a list of the 10 most threatening vulnerabilities in Web3 protocols. Over the next weeks, we'll be unveiling these most common vulnerabilities affecting teams everywhere. Number 10 on our list is Integer Overflow/Underflow.
0
0
3
Feedback like this from clients is one of the reasons that makes working at Sherlock so worthwhile.
Every vault deserves a good stress test. @sherlockdefi pressure-tested the upcoming generation of Mellow's vaults and helped us make them stronger🦾 Security isn’t optional when you’re building institutional rails😤
0
0
0
To find a niche in your career can be a long road, but is something you can only learn with time & experience. Having worked in IT/SaaS sales and traditional cyber security consultancy, this path has led me to Web3 Security, and I can't see that changing.
0
0
0
This.
Researchers. The @ethereum Fusaka Audit Contest and your chance at rewards of up to $2,000,000 is almost here. Mark your calendars for September 15th.
0
0
1
We are happy to announce that the audit for @HydrexFi is complete! Hydrex is a MetaDEX purpose-built for Base, bringing frictionless & innovative Liquidity Infrastructure to the ecosystem.
6
6
35
The attack vector in this issue utilizes asynchronous state on different chains. Something to always keep in mind when auditing crosschain Defi.
Welcome back to Sherlock's Vulnerability Spotlight, where we highlight an impactful vulnerability uncovered during a Sherlock audit. This week, we have a Cross-Chain Liquidation Lockout. It was uncovered by @jokrsec, @kirkeelee, @waydou9, @zeroisabot, @0xh2134, @Oxelmiguel12,
0
1
8
10 small steps are a leap
Every small win should be celebrated 😁 Behind this small amount earned is the immense amount of knowledge you gained from missing bugs the hard way.
0
0
3
Welcome back to Sherlock's Vulnerability Spotlight, where we highlight an impactful vulnerability uncovered during a Sherlock audit. This week, we have a Cross-Chain Liquidation Lockout. It was uncovered by @jokrsec, @kirkeelee, @waydou9, @zeroisabot, @0xh2134, @Oxelmiguel12,
3
5
41
GM happy Monday all. Another week helping protocols dodge smart contract vulnerabilities 💨
2
0
5
This is everything that's wrong with Crypto in its current state. It shouldn't be sifting through the 🐂💩 in order to get to real utility. It should be the other way around... Every day working in the industry is a step in the right direction.
Exactly 24 hours ago, Kanye West launched crypto token $YZY It has since plummeted 75%.
0
0
1
Can't wait for this, one for those nights where you want to feel extra productive in between auditing✍️
Introducing The Web3 Security Podcast hosted by our CEO @jack__sanford! Each episode will feature leaders from the most prominent organizations in the industry offering insights on security, Web3, and more. Our first episode with @fredrik0x from @ethereumfndn premieres today!
0
0
4
They don't teach this 🔥 in school. Yet... Regardless, I'll never stop learning until the day I die 🎲🌱
0
0
2
Lack of input validation is one of the top 10 vulnerabilities found in smart contracts. Happy to have helped uncover this one in the @BreederDodo @sherlockdefi contest
Our Security Researcher @patitonar describes how he found this vulnerability ✍️ "When I first analyzed the onCall() function, the complexity of parameter decoding immediately caught my attention. The function handles multiple encoded structures, which made me focus on finding
0
1
13
GM Web3 Security. Is GPT5 still god awful at discovering smart contract vulnerabilities? Surely they will just be mad duplicated anyway, right?
0
0
0
One of the biggest challenges we face is bridging the gap between Web2 and Web3 security. Both are linked much more than people realize. If someone exfiltrates your data which contains keys to your whitelisted admin wallet, or you install a malicious coding extension, or you
0
0
1
Auditors, set your alarms for the @neutrl_labs audit contest starting next Monday, August 18th! With up to $100,000 in rewards, this is not a contest you'll want to miss.
7
8
72